071bf409ac27697577b3.svg

0c3174a883da84b248b3.gif

12d9e6ce264ba788abf2.woff2

17950a2a63149e34d687.woff

17ebf20f6e5535af6287.eot

19bc31febdd0577fa185.woff

1b2c83313a7bf49e0f3d.eot

1d876c9791c9e53553de.svg

1e59d2330b4c6deb84b3.ttf

20fd1704ea223900efa9.woff2

3306427311f302ee74ab.svg

473e9161869ef6c96a0f.svg

585fba7fbb255b1e76dc.ttf

604d0d263f9605bfbe80.eot

62f886203d1b9444300e.woff

6836d4f9345400a6f30b.woff

6aa0c52f188dc4b825d0.gif

6d004f1d10ccd00df55e.woff

6d4cb2e2edcf03748d67.woff

749973ba090f02a3c9bb.png

7504d90e1ba705e20faf.ttf

791b5e3dfa5b36eb537a.woff2

792ac079a117733863fc.ttf

7c702ee3a0388bcd5fe5.woff

7e101da62790bb545eea.woff

7f01b07148f205f6e825.png

7fb79b129b1d57c4eca4.ttf

84b8d728eb1f047ab9cf.woff

8b43027f47b20503057d.eot

9490dc43e0b21c40cc09.ttf

949e826c979149099dcb.woff

9b753eb78f7859f8acc4.ttf

a1784ef624a7ad307acb.eot

afc5ac16dc1e359ece81.woff2

agorafont.css

agorafont.css.map

agorafont.js

agorafont.js.map

areamap.css

areamap.css.map

areamap.js

areamap.js.map

b231b62df6ad72b806a6.png

b723b56d54797c3baf49.eot

bc07fa358cc8196b46af.woff

bd350a81317ef9e9037d.svg

ccecd696c5667fb48d89.eot

customfont.css

customfont.css.map

customfont.js

customfont.js.map

dcf2eb7e75a877e9a972.woff

e4bf98ddbe4fdb3f204d.ttf

ee717af0d31fd3d79d0d.woff2

ef0a3b0c68db8a338bb0.png

ef4d9f8063d7af6f1060.svg

f20a6ec06610e11270e5.woff

f691f37e57f04c152e23.woff

f74306b2e6602fc56a26.woff2

f86ec1c1abd9017ca4c9.svg

fc8e084870a377056284.woff2

homeflash.css

homeflash.css.map

homeflash.js

homeflash.js.LICENSE.txt

homeflash.js.map

index.css

index.css.map

index.html

index.js

index.js.LICENSE.txt

index.js.map

materialagora.css

materialagora.css.map

materialagora.js

materialagora.js.map

materialidc.css

materialidc.css.map

materialidc.js

materialidc.js.map

mdlselectfield.css

mdlselectfield.css.map

mdlselectfield.js

mdlselectfield.js.map

onesearch.js

onesearch.js.map

owlcarousel.css

owlcarousel.css.map

owlcarousel.js

owlcarousel.js.map

package.json

psbfont.css

psbfont.css.map

psbfont.js

psbfont.js.map

qrcode.js

qrcode.js.map

regfont.css

regfont.css.map

regfont.js

See how Anthropic automated 95% of dependency reviews with Socket

ibp-cdn

idcglobal

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

ibp-cdn - npm Package File explorer